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Synopsis: To provide information to FBI HQ and to request 
assistance from Legates Australia and Canada. 

Enclosure (s) : 

For NIPC: One (1) FD-302 of so urce intprviftw. 

Hue_£jJ_rlnnimpnf mi 1-hl_ 


For Legate Canberra: One (1) FD-302 of source interview. 


One (1) document of 


T 


For Legate Ottawa: One (1) FD -302 of aburce interview. 
One (1) document of 


Details: The concurrent version system (CVS) for O penBSD 

operating system (Qfi) has been romnrorrn eeri_ Aa a rpBnl h .1 | 


exploit, 


| An OpenSSH 
] nas also been discovered. 


OpenBSD was compromised through the Internet host _ 

CYS.QPenfrBd ,org or f tp.o penbsd.org, both located in Canada. | | 

|_I which ne 
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connects to from Internet hosts in Aimfral -i a. tn havp rnmnii 
the hack.I 
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irterrorism ^om: Chicago 
I 08/14/2002 


LEAD(s): 

Set Lead 1: 

COUNTERTERRORISM 

AT WASHINGTON. D.C,. 

Provide analysis of information and source code for 
OpenBSD and OpenSSH. Conduct logical follow-up investigation. 

Set Lead 2: 

CANBERRA 

AT MELBOURNE & SYDNEY 

Contact Internet service providers to determine 
identity of individual using the following Internet hosts: 



The individual using these Internet hosts may be 
responsible for the hack and exploit of OpenBSD and OpenSSH 
Conduct logical follow-up investigation. 

Set Lead 3: 


OTTAWA 


AT CALGARY & EDMONTON. ALBERTA 





To: 

Re: 


Poiinterl-error i am * *om: Chicago 

08 / 14/2002 


regarding unathorized intrusions resulting in exploits in OpenBSD 
and OpenSSH. Conduct logical follow-up investigation. 

( |has adipini sfiftive control over the Internet host 
cvs. openosd. org, and | | has administrative control over the 
Internet host ftp.openbsd.org. 
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